Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d3d061e-3faf-407d-b5ed-55178126d651.roa
File: 6d3d061e-3faf-407d-b5ed-55178126d651.roa (raw, json)
Hash identifier: FCplvaUEJwbEj/iZhun3tzy76J+KeqYo0dZFYZ6Ss+M=
Subject key identifier: EA:D2:D8:CF:C8:74:21:DE:36:16:13:3A:2B:97:28:D2:F4:16:DA:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 675349BF6EC50B03F2D4C371AD95DCE53F0821C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d3d061e-3faf-407d-b5ed-55178126d651.roa
Signing time: Sun 31 May 2026 00:30:16 +0000
ROA not before: Sun 31 May 2026 00:30:16 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:53:49:bf:6e:c5:0b:03:f2:d4:c3:71:ad:95:dc:e5:3f:08:21:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 00:30:16 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=471e9d6743bcbd6645ddf08d811d01ccd811005e9671a862961eff2c7cb282db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:5d:cb:62:63:a2:79:61:b4:9f:c7:1b:6e:
14:2f:4c:34:99:18:b1:e6:7e:68:4c:e5:96:f1:e0:
09:b8:51:f2:bd:9d:29:35:9c:bd:bc:f4:4d:af:47:
d3:da:c0:df:39:74:02:ba:21:af:54:e5:a2:47:da:
c8:f0:87:35:95:6d:0f:85:41:10:88:53:b9:b9:0c:
47:3a:60:39:53:59:e5:57:55:80:25:70:aa:24:63:
20:3d:02:82:37:6b:11:00:aa:48:5e:e4:bf:ea:d9:
4f:28:88:07:36:81:a9:ce:f0:a2:fa:8f:e1:1e:1f:
1b:77:be:91:9c:ef:eb:ae:e3:ed:40:dd:4f:0e:02:
ca:58:2c:d8:2d:d9:96:2f:2d:90:36:2c:60:73:ad:
d1:44:d9:1e:8d:dd:a2:e9:36:7a:6c:c5:16:12:c1:
f9:6a:01:da:eb:63:2d:d8:9c:16:31:dd:f8:57:33:
fb:49:11:17:03:32:ab:93:14:cc:62:98:b4:6a:77:
24:f3:8d:40:86:b7:26:72:56:1d:b2:6a:db:11:73:
c2:46:39:fb:45:5d:1e:8d:a7:6e:95:a4:10:b6:73:
c5:d7:5b:be:39:ca:86:af:ab:cd:92:0d:d9:5a:e4:
d0:12:e3:43:6a:18:50:04:9a:89:16:1d:9b:0c:51:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:D8:CF:C8:74:21:DE:36:16:13:3A:2B:97:28:D2:F4:16:DA:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d3d061e-3faf-407d-b5ed-55178126d651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:c080::/48
Signature Algorithm: sha256WithRSAEncryption
66:fd:08:6a:66:d3:7c:72:e1:05:ec:2b:d1:80:ca:f4:da:45:
79:dc:de:fe:40:2e:b0:4f:cb:5e:06:81:9d:dd:9e:e8:64:21:
e4:87:74:0e:30:de:0c:87:e1:46:d8:2e:c2:07:56:8b:69:1c:
5e:cd:65:bb:c3:21:77:e5:3a:2c:c8:6f:79:64:a8:92:9d:33:
61:de:71:5d:8f:26:60:49:de:df:e2:7e:b0:04:03:8a:18:25:
57:7d:80:72:17:80:35:8e:be:96:eb:0e:50:4e:38:46:13:42:
7a:87:24:00:57:96:b2:2a:0e:cf:de:23:34:3d:b7:48:db:01:
7b:32:1e:fa:33:0d:d3:52:5d:4c:ea:da:06:d1:69:8e:5a:23:
7b:6e:a1:41:93:91:e5:09:b1:c8:50:5e:38:f7:0f:5f:0e:35:
5e:70:4e:85:de:16:0e:9f:b3:99:b7:74:01:ff:7a:6c:e2:06:
57:e4:16:a1:03:d7:a8:a9:dc:3c:36:cd:cf:36:a6:65:61:15:
ee:b5:47:3c:94:71:2b:d5:67:91:3a:76:91:40:d9:d1:08:6c:
36:dd:2f:32:5d:4d:18:a8:91:85:4c:2e:61:04:9a:f6:25:61:
f0:cb:e7:98:ff:ae:d7:e5:e4:bc:0f:46:55:e3:56:d0:a6:20:
9d:4d:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:30 2026 by rpki-client